• NATO-certified erasure software
  • Certificates of destruction
  • NZ owned & operated
  • Auckland, Wellington & nationwide pickup
  • Hard drive shredding

Privacy policy

How EXTECH Ewaste Solutions collects, uses and protects personal information, under the New Zealand Privacy Act 2020. Written in plain English.

Last updated October 2026

Contents

Who we are

This policy explains how EXTECH Ewaste Solutions (EXTECH, we, us) collects, uses, shares and protects personal information. We are a New Zealand owned and operated IT asset disposition and e-waste business, with sites in Onehunga, Auckland and the Hutt Valley, Wellington.

We work with businesses, government and institutions, so most of the personal information we hold is about people at those organisations. We follow the Privacy Act 2020 and its information privacy principles.

Information we collect

We collect only what we need to provide our services:

  • Enquiries and quotes: your name, company, email address, phone number and message.
  • Collections and bookings: pickup addresses, site-access details, a contact person, and asset lists or quantities.
  • Client portal: account details and records of your jobs, for existing clients.
  • Asset records: serial numbers, make and model, and the status of equipment we process, used for audit logs, certificates and reporting.
  • Website data: your IP address, device and browser details, and the pages you visit (see website data and cookies below).
  • Communications: our emails and messages with you.

We usually collect information directly from you or from your organisation.

Information on equipment you send us

Equipment you send us can hold personal information about your staff, customers or others. That information remains your responsibility as the organisation that holds it.

We handle equipment on your instructions. Storage devices are erased with certified software or physically shredded, and we record what happened. We do not use the information on the equipment for our own purposes.

If you need specific terms, such as a data processing agreement, tell us before the collection. See data destruction for how the two methods work.

How we use it

  • To provide quotes, arrange collections and deliver our services.
  • To produce manifests, audit logs and certificates, and to run the client portal.
  • To contact you about your enquiry or job.
  • To protect our website and forms from spam and misuse.
  • To understand how our website is used, and improve it.
  • To meet our legal obligations.

We do not sell personal information.

Who we share it with

We share personal information only when it is needed, and only what is needed:

  • Logistics partners, to carry out your collection.
  • Service providers, such as those that host our website, send email, and provide analytics and spam protection.
  • Professional advisers, such as accountants and lawyers.
  • Authorities, when the law requires it.

Outside New Zealand

Some of the providers we use, including Google services for analytics, tag management and spam protection, store or process information outside New Zealand. When personal information goes overseas, we take steps to make sure it is protected as the Privacy Act requires.

Website data and cookies

Our website uses cookies and similar technologies to work properly, to measure how it is used, and to help protect our forms from spam using Google reCAPTCHA. The Google Privacy Policy and Terms of Service apply to reCAPTCHA.

You can block or delete cookies in your browser settings. Some parts of the site may not work as well if you do.

Security and breaches

We take reasonable steps to protect personal information from loss, misuse and unauthorised access or disclosure, whether it is held digitally or on paper.

If a privacy breach is likely to cause serious harm, we will notify the Privacy Commissioner and the people affected, as the Privacy Act requires.

How long we keep it

We keep personal information only as long as we need it for the purpose we collected it, or as required by law or our agreements with clients. Records such as manifests, audit logs and certificates are kept for as long as audit and contract needs require. When we no longer need information, we delete or de-identify it.

Your rights and complaints

You can ask us for the personal information we hold about you, and ask us to correct it. We will respond as soon as reasonably practicable, and within the time the Privacy Act allows.

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Office of the Privacy Commissioner.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.

Contact us

For any question about this policy, or to ask for access to or correction of your personal information, get in touch.

What to include in a privacy request

  • Your name, and your organisation if it is a work matter.
  • What you would like to see or correct.
  • The best way to reach you.
Email us